added authentication (one user only for now)